{"name":"io.github.jozrahq/lokka","slug":"jozrahq-lokka","title":"Lokka","description":"Query and manage Microsoft Graph and Azure Resource Manager APIs from MCP clients.","url":"https://mcp.market/server/jozrahq-lokka","rating":null,"grade":"C","score":65,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":14,"stars":null,"forks":null,"downloads_week":563,"last_push_at":null,"license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/jozrahq/lokka","website":null,"version":"2.1.2","remotes":[],"packages":[{"registryType":"npm","identifier":"@merill/lokka","version":"2.1.2","transport":{"type":"stdio"}}],"tools":[{"name":"Lokka-Microsoft","description":"A versatile tool to interact with Microsoft APIs including Microsoft Graph (Entra) and Azure Resource Management. IMPORTANT: For Graph API GET requests using advanced query parameters ($filter, $count, $search, $orderby), you are ADVISED to set 'consistencyLevel: \"eventual\"'. NOTE: Results are specific to Lokka's active tenant connection (named in each result). If the user switches connections/ten","write_action":false,"price_micros":0,"input_schema":null},{"name":"add-graph-permission","description":"Request additional Microsoft Graph permission scopes by performing a fresh interactive sign-in. This tool only works in interactive authentication mode and should be used if any Graph API call returns a permission denied error.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get-auth-status","description":"Check the current authentication status and mode of the MCP Server and also returns the current graph permission scopes of the access token for the current session.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-add-cert-connection","description":"Internal: add an app-only connection that authenticates with a client certificate (PEM). Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-add-sp-connection","description":"Internal: add a service principal (client credentials) connection to a Microsoft tenant. Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-add-user-connection","description":"Internal: sign into a Microsoft tenant interactively (browser) and add it as a Lokka connection. Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-connect-created-app","description":"Internal: complete sign-in for an app created by lokka-create-app. Returns { connected:false } while the new app is still replicating through the directory — poll until connected. Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-consent-permissions","description":"Internal: request or remove Microsoft Graph delegated permission scopes for the active connection. Used by the Lokka permissions app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-create-app","description":"Internal: create a new Entra app registration in the active user's tenant — adds a client secret or auto-generated certificate, grants the requested Graph application permissions, and stores the credential. Does NOT sign in (poll lokka-connect-created-app afterwards). Used by the Lokka connections app UI.","write_action":true,"price_micros":0,"input_schema":null},{"name":"lokka-get-guardrails","description":"Get the guardrails (user-set policy) currently in effect for model tool calls on the active connection: which HTTP methods are allowed, the API allow/deny rules, and any per-resource id allowlists. Read-only — guardrails can only be changed by the user in the Lokka Guardrails app (open-lokka-guardrails). Direct user runs from Graph Explorer are not blocked by guardrails.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-get-guardrails-config","description":"Internal: full guardrails config plus the connected tenants and resource presets, for the Guardrails app editor.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-get-permissions","description":"Internal: get the Microsoft Graph permissions (scopes/roles) currently granted to Lokka's active connection. Used by the Lokka permissions app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-grant-app-permissions","description":"Internal: grant or remove Microsoft Graph application permissions on an app-only connection, using a signed-in user/admin connection in the same tenant. Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-list-connections","description":"List Lokka's signed-in Microsoft tenant connections and which one is active. Use this to see which tenants are available before switching, or when the user asks which tenant/account Lokka is using.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-reconnect-connection","description":"Internal: re-acquire a fresh token for a connection (user connections re-run interactive sign-in to pick up newly consented scopes; service principals rebuild from the stored secret/certificate to pick up newly granted app roles). Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-remove-connection","description":"Internal: remove a Lokka tenant connection. Used by the Lokka connections app UI.","write_action":true,"price_micros":0,"input_schema":null},{"name":"lokka-remove-guardrails-tenant","description":"Internal: remove a tenant's guardrails rule so it reverts to Global only. Used by the Guardrails app.","write_action":true,"price_micros":0,"input_schema":null},{"name":"lokka-search-directory","description":"Internal: search the active connection's directory for items in a collection (e.g. groups, users) by name, for the Guardrails resource picker. Read-only; not subject to guardrails.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-set-active-connection","description":"Internal: switch Lokka's active tenant connection. Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-set-connection-label","description":"Internal: set a friendly display label for a connection (empty clears it). Used by the Lokka connections app UI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-set-guardrails-enabled","description":"Internal: enable or disable Guardrails enforcement. Used by the Guardrails app. When disabled, Lokka allows every request through without method, API path, or resource guardrail checks.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-set-guardrails-scope","description":"Internal: replace the guardrails policy for a scope ('global' or a tenant id). Used by the Guardrails app.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lokka-update-app-credential","description":"Internal: replace an app-only connection's credential with a new client secret or certificate, then reconnect. Used by the Lokka connections app UI.","write_action":true,"price_micros":0,"input_schema":null},{"name":"open-graph-explorer","description":"Open the interactive Lokka Graph explorer UI for the user. Call this whenever the user asks to open, show, or launch Lokka, the Lokka app, or the Graph explorer (e.g. 'open lokka', 'show me the graph explorer'), or wants to explore Microsoft Graph interactively without running a specific query first. Optionally pre-fills a request path for the user to start from.","write_action":false,"price_micros":0,"input_schema":null},{"name":"open-lokka-connections","description":"Open the Lokka connections manager UI for the user. Call this whenever the user asks to sign in, log in, authenticate, connect, manage connections or tenants, switch tenants, or says things like 'lokka auth', 'lokka sign in', 'lokka connection'. Also call it when a Lokka query fails because the user is not signed in — in that case pass 'pendingRequest' so the request resumes automatically after si","write_action":false,"price_micros":0,"input_schema":null},{"name":"open-lokka-guardrails","description":"Open the Lokka Guardrails UI for the user. Call this whenever the user says 'lokka guardrails', 'lokka settings', wants to control/limit model tool calls, change which HTTP methods or APIs are allowed, restrict access to specific groups/users/sites, or when a model request was just blocked by a guardrail and the user needs to adjust it. After a block, the app opens to the relevant scope, explains ","write_action":false,"price_micros":0,"input_schema":null},{"name":"open-lokka-help","description":"Open the Lokka help tour UI for the user. Call this whenever the user says 'lokka help', asks what Lokka can do, how to use Lokka, what tools are available, or wants an overview/tour of Lokka's features. The UI is a visual walkthrough of Graph Explorer, Lokka Settings (connections and guardrails), Connections, Permissions, and chat usage, with one-click launchers and sample prompts.","write_action":false,"price_micros":0,"input_schema":null},{"name":"open-lokka-permissions","description":"Open the Lokka permissions manager UI for the user. Call this whenever the user asks about Lokka's Microsoft Graph permissions, wants to grant/consent to additional permissions, or says things like 'lokka permissions', 'consent to permissions', 'add graph permissions' — and CALL IT WITH the 'scopes' argument when a Graph call fails with 403 insufficient privileges and you know which permission is ","write_action":false,"price_micros":0,"input_schema":null},{"name":"open-lokka-settings","description":"Open the Lokka settings UI for the user. Call this whenever the user asks for Lokka settings, wants a single place to manage connections or guardrails, or says things like 'lokka settings'. The UI combines the connections manager and guardrails settings; permissions stay in the dedicated Permissions app and inside connection editing.","write_action":false,"price_micros":0,"input_schema":null},{"name":"set-access-token","description":"Set or update the access token for Microsoft Graph authentication. Use this when the MCP Client has obtained a fresh token through interactive authentication.","write_action":false,"price_micros":0,"input_schema":null},{"name":"switch-lokka-connection","description":"Switch Lokka's active tenant connection. Use whenever the user asks to switch to a different tenant, account or connection (e.g. 'switch to my dev tenant', 'use the contoso tenant'). Pass any identifying fragment — tenant name, domain, tenant id, username or connection id; it is fuzzy-matched against the signed-in connections. IMPORTANT: after a successful switch, results from earlier in the conve","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":65,"grade":"C","scanned_at":"2026-09-26T21:21:21.687Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T21:21:21.652Z","components":{"code":{"score":25,"max":25,"notes":["8 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":3,"max":15,"notes":["repository not readable: repo not found"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@merill/lokka","version":"2.1.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":10,"publishedAt":"2026-06-19T13:19:50.765Z","repositoryUrl":"git+https://github.com/merill/lokka.git","weeklyDownloads":563}],"repo":{"found":false,"owner":"jozrahq","repo":"lokka","error":"repo not found"},"icon":{"url":null,"source":"none"},"presence":{"stars":null,"forks":null,"downloadsWeek":563,"license":"MIT","lastPushAt":null,"score":14}}}},"grade_history":[],"reviews":[]}